Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File:                     vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier:          1oWv2js/NkLxVV9DI93dcUz6fz3YJX+3s4BBnSSasMA=
Subject key identifier:   18:31:C1:17:89:95:06:F4:31:6A:68:2E:05:4A:97:3D:80:ED:6C:95
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer:       /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial:       0194BD85723345316B16E8652C483AF23E3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 18:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:26 +0000
Files and hashes:         1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=)
                          2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: t9iXyx3iyPOHBWhx5PWdQSrsRZf5Fj+06/hWerU5sps=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:72:33:45:31:6b:16:e8:65:2c:48:3a:f2:3e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
        Validity
            Not Before: Jan 31 18:00:26 2025 GMT
            Not After : Feb  1 18:00:26 2025 GMT
        Subject: CN=1831c117899506f4316a682e054a973d80ed6c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:18:15:4f:89:7a:d3:94:8c:3c:1d:2a:00:
                    1e:f0:39:3c:96:46:27:fe:8a:a9:41:76:e8:ea:42:
                    f5:b2:67:63:7f:6f:85:2d:dd:24:94:fe:70:00:ee:
                    8d:ae:7b:c5:73:87:e9:f0:4d:bd:47:85:23:f9:54:
                    0e:f9:20:15:1d:75:35:81:f2:2d:a4:9f:c4:9e:39:
                    a1:d1:8f:76:27:4d:57:6d:cd:f9:be:2d:32:4a:43:
                    00:0a:43:59:2e:e7:eb:3b:ba:6b:26:94:bf:5f:0c:
                    6e:e1:ea:96:de:4a:a7:05:04:0b:aa:87:42:dc:fc:
                    eb:ff:61:b7:04:e1:ac:51:ad:bd:cc:b4:8d:3d:7b:
                    6b:0c:54:74:01:ea:a6:4b:e5:bf:a8:2a:00:fa:6a:
                    2a:95:5a:e8:3a:39:2b:99:00:9c:8f:b7:61:02:fc:
                    2c:22:e1:65:54:a6:e1:51:75:14:14:dd:c6:85:3b:
                    3e:96:53:0b:11:cf:0a:42:46:d5:90:b1:38:ac:8a:
                    62:bc:d1:fe:bc:20:07:98:b0:ff:50:2b:fa:9a:b1:
                    da:00:ee:e3:16:84:a0:5b:3c:4e:73:b3:1c:44:8f:
                    44:b8:0f:c3:3d:5c:50:aa:ab:6e:d0:b1:fd:b8:fc:
                    f6:36:c4:cd:4e:13:f4:78:05:47:f2:78:a7:f2:7e:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:31:C1:17:89:95:06:F4:31:6A:68:2E:05:4A:97:3D:80:ED:6C:95
            X509v3 Authority Key Identifier:
                keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:64:57:7c:e4:32:1f:67:10:1f:44:6a:f2:7d:73:00:66:eb:
         8f:0a:46:38:48:98:6f:6e:9f:73:bc:1b:e4:f2:70:3e:60:96:
         25:db:6a:0d:0a:21:25:68:d0:67:e4:cd:ac:05:e1:23:12:50:
         ff:7a:bb:d5:92:68:99:39:53:ff:c4:50:cc:11:e4:10:ac:97:
         24:3f:2e:82:8d:76:fe:86:e9:16:d8:27:b3:d1:11:02:f5:c7:
         16:dd:ac:32:35:7d:e7:87:36:a7:1e:de:6f:e7:e9:f7:07:65:
         a9:ab:cb:6b:53:74:4f:74:ee:df:5f:38:c5:2a:67:7e:97:98:
         6a:91:05:3b:d9:57:ee:85:16:6a:cd:28:8b:de:48:ca:f3:3e:
         de:40:dc:66:3b:1e:37:a1:67:e1:51:cd:c7:5d:fc:dc:d7:56:
         bf:17:9c:4f:c5:e3:87:36:f1:0d:c5:a5:12:8f:04:99:4c:fa:
         57:c4:bf:ac:13:34:ab:f6:bc:9e:ef:f8:48:1d:b8:aa:70:67:
         b7:13:61:6e:18:a8:29:a2:9a:dc:c7:c7:f9:1d:c7:a2:60:fd:
         eb:81:10:bb:98:27:b0:4d:89:d6:87:d5:da:cd:c9:fb:18:8d:
         ec:d6:47:61:66:1f:22:c2:aa:2f:0c:ef:11:06:b7:7d:89:d8:
         e1:b1:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:18 2025 by rpki-client